Windows Deployment Services (WDS) Remote Code Execution

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products12

• Windows Server 2012
• Windows Server 2012 (Server Core installation)
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)
• Windows Server 2016
• Windows Server 2016 (Server Core installation)
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2025
• Windows Server 2025 (Server Core installation)

✅ Remediation

KB5094123 (Security Update) — fixed build 10.0.17763.8880 KB5094128 (Security Update) — fixed build 10.0.20348.5256 KB5094125 (Security Update) — fixed build 10.0.26100.32995 KB5094122 (Security Update) — fixed build 10.0.14393.9234 KB5094042 (Monthly Rollup) — fixed build 6.2.9200.26132 KB5094041 (Monthly Rollup) — fixed build 6.3.9600.23228

🔗 References (13)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42987
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094123
• referencehttps://support.microsoft.com/help/5094123
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094128
• referencehttps://support.microsoft.com/help/5094128
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094125
• referencehttps://support.microsoft.com/help/5094125
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094122
• referencehttps://support.microsoft.com/help/5094122
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094042
• referencehttps://support.microsoft.com/help/5094042
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094041
• referencehttps://support.microsoft.com/help/5094041